CVE-2011-1178: Integer Overflow
An integer overflow, leading to heap-based buffer overflow, was found in The Gimp's Personal Computer eXchange (PCX) image file plug-in. A remote attacker could provide a specially-crafted PCX image file, which once opened by a local, unsuspecting user would lead to denial of service (GIMP PCX plug-in crash) or, potentially, arbitrary code execution with the privileges of the user running Gimp.
Other sources
Multiple integer overflows in the loadimage function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based buffer overflow.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1178?
CVE-2011-1178 is rated as a high severity vulnerability due to the potential for remote code execution and denial of service.
How can I fix CVE-2011-1178?
To mitigate CVE-2011-1178, users should upgrade to a version of GIMP newer than 2.7.0, where the vulnerability has been patched.
What type of vulnerability is CVE-2011-1178?
CVE-2011-1178 is classified as an integer overflow leading to a heap-based buffer overflow.
Who is affected by CVE-2011-1178?
CVE-2011-1178 affects users of GIMP versions up to and including 2.7.0 that handle PCX image files.
What are the potential consequences of exploiting CVE-2011-1178?
Exploiting CVE-2011-1178 may result in denial of service attacks or arbitrary code execution on affected systems.